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ConsoleOne User Guide 


About This Guide 


This guide explains what ConsoleOne™ is and how to install, use, and 
troubleshoot it. 


NOTE: This guide covers only the core ConsoleOne features that you get if you 
download ConsoleOne from the Novell® Free Downloads web site (http:// 
www.novell.com/download). For information on ConsoleOne features added by other 
products, see the documentation for those products. 
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Understanding 


This chapter explains what ConsoleOne™ is, what you can do with it, and 
what has changed since the last release. It also provides basic NDS™ and 
NetWare® background information for performing management tasks. 


What Is ConsoleOne? 
ConsoleOne is a Java* management utility that runs on a Windows* 
workstation or a NetWare server. By default, it lets you manage 
+ NDS objects, rights, and schema 


+ NetWare file system resources and access control 


If you install other Novell® products, additional features may be added to 
ConsoleOne. For example, if you install NDS 8, LDAP management and 
NetWare remote console features are added. 





For more information on... See... 





Default ConsoleOne features, including what has The remaining sections of this chapter 
changed since the last release 


ConsoleOne features added by Novell or third- The documentation for the products that add the 
party products features 
ConsoleOne system requirements “System Requirements” on page 25 


New Features 


The following sections list new features in this and previous ConsoleOne 
releases. 
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Version 1.2b 


This release is available with NDS 8 and the Consolidated Support Pack. 


+ 


+ 


+ 


Version 1.2 


Runs on a Windows* workstation or a NetWare 5 server (replaces 
ConsoleOne 1.2 and 1.1) 


Fixes various known defects, including some related to using 
ConsoleOne in non-English locales 


Documentation is packaged separately (unbundled from NDS and 
NetWare) 


This release was available with the initial NDS 8 release for NetWare. 


+ 


Runs only on a Windows workstation (replaces ConsoleOne 1.1 on the 
workstation but not on the server) 


Browse NDS 8 containers with hundreds of thousands of objects (gets 
and displays the objects a page at a time) 


Manage LDAP services (available only if NDS 8 is installed) 


Access remote NetWare server consoles from server objects in the NDS 
tree (available only if NDS 8 is installed) 


Search NDS trees by object name, type, or property value 
Filter NDS views by object name or type 
Set any container at the top of the left pane 


Extend the NDS schema to allow new types of objects and properties, 
including auxiliary classes 


Create and manage any NDS object type defined in the schema, including 
new types you’ve added 


Modify multiple objects of the same type simultaneously 


Define templates for creating new user accounts, including creation of the 
home directory 


Control whether NDS rights assignments are inherited to lower levels in 
the tree, even for specific properties such as Password Management 


Manage the file system on NetWare volumes, including rights, attributes, 
and disk space allocation 
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Version 1.1 


Version 1.0 


This release was available with the initial NetWare 5 release. 
+ Runs on a Windows workstation or a NetWare 5 server 


+ Create and manage user, group, organization, and organizational unit 
objects in NDS 


+ Manage NDS rights on any object, but rights to specific properties such 
as Password Management can’t be made inheritable 


+ (When run on the server only) Access local or remote server consoles, 
manage the local file system (except rights) including the DOS partition, 
edit server configuration files, host Java applets 


Developer-only release. 


NDS Objects 


The following table summarizes the NDS object management capabilities of 
ConsoleOne. For instructions on using these capabilities to perform specific 
tasks, see “Managing” on page 35. For basic information about the types of 
objects in an NDS tree, see NDS Concepts and Planning (http:// 
www.novell.com/documentation/lg/nw5/usnds/basicenu/data/ 
h0000001.html). 





Capability 


Description 





Browsing and 
finding NDS 
objects 


Creating and 
manipulating 
NDS objects 


In ConsoleOne, the available NDS trees are listed in The Network container. The 
trees you are logged in to appear at the top of the list. All other available trees 
are listed in the Novell Directory Services subcontainer. If you try to browse an 
NDS tree that you aren't logged in to, you are prompted to log in. Once inside a 
tree, you can expand and collapse branches of the tree and perform searches to 
find specific NDS objects. You can also customize the right pane to hide one or 
more NDS object types. 


In ConsoleOne, you create and manipulate NDS objects using standard menu 
options like New, Properties, Rename, Move, and Delete. Where it makes sense, 
you can select multiple objects to perform an action on. For example, you can 
select multiple NDS objects of the same type to modify their properties in a single 
operation. You can also move or delete multiple NDS objects at a time. For 
limitations on manipulating objects, see “Known Limitations” on page 47. 
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Capability 


Description 





Organizing 
NDS objects 


Managing NDS 
user accounts 


Administering 
NDS rights 


Managing 
NetWare server 
resources 
through NDS 





NDS Rights 


In ConsoleOne, you can create all NDS container types, such as Country, 
Locality, Organization, and Organizational Unit. This allows you to organize the 
objects in your tree. You can also create object aliases to provide access to an 
object from multiple locations in the tree. For general design considerations when 
organizing an NDS tree, see NDS Concepts and Planning (http:// 
www.novell.com/documentation/lg/nw5/usnds/basicenu/data/h0000001.html). 


In ConsoleOne, you set up an NDS user account by creating a user object and 
then setting properties that control login and the user's network computing 
environment. You can associate login scripts with the user to automate his or her 
connections to network files, printers, or other such resources. You can set an 
accounting balance to restrict or track the user's use of individual NetWare 
servers. Using a template object, you can define these properties ahead of time, 
before actually creating the user object. For limitations on setting up user 
accounts, see “Known Limitations” on page 47. Note also the behavior described 
in “Login Time Restrictions for Remote Users” on page 29. 


In ConsoleOne, users who have explicit rights to access an NDS object are listed 
as trustees on the NDS Rights property pages of that object. A trustee's assigned 
rights can be to the object as a whole, to all the object's properties, or to individual 
properties. If the object that the trustee has rights to is a container, the rights can 
be assigned as either inheritable or noninheritable. The NDS Rights property 
pages also list any filters that block inheritable rights assigned higher in the tree 
from being exercised on the current object. Finally, the NDS Rights property 
pages let you query NDS for any user's effective rights to the current object or to 
specific properties associated with the object. For more information about how 
NDS rights work, see “NDS Rights” on page 12. 


In ConsoleOne, you can manage the NetWare server and volume objects that 
are automatically created in your NDS tree during NetWare or NDS installation. 
You can also create additional objects for NetWare servers and volumes that are 
installed in other NDS trees or that are running earlier NetWare versions. 
Through these objects, you can monitor server or volume activity, record 
information about the locations and configurations of the servers and volumes, 
and manage the files, folders, access control, and space allocation on the 
volumes. For more information about managing NetWare file systems, see 
“NetWare File Systems” on page 20 and “NetWare Access Control” on page 21. 


Rights are system flags that you can set on individual NDS objects to control 
access to those objects or to properties associated with those objects. When 
you assign rights, you always link them with a specific user, group, or other 
NDS object that is the trustee (possessor) of the rights. 
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Types of Rights Assignments 


Type 


In a trustee assignment, you can grant the following three types of rights. 


Purpose 


ConsoleOne help topic 
describing these rights 





Object (entry) 
rights 


All properties 
rights 


Specific 
property 
rights 





To enable the trustee to access or manipulate the 


object as a whole 


To enable the trustee to access or manipulate all the 


properties of the object 


To enable the trustee to access or manipulate a 


specific property of the object 


Rights to an NDS entry (object) 
(../../c1help/novell_ndsadmin/ 
entryrights. html) 


Rights to an NDS property (../../ 
c1help/novell_ndsadmin/ 
propertyrights.html) 


Rights to an NDS property (../../ 
c1help/novell_ndsadmin/ 
propertyrights.html) 


Object rights and all properties rights are inheritable by default, meaning the 
trustee can exercise them on subordinate objects without having an explicit 
rights assignment on those subordinate objects. Specific property rights are 
noninheritable by default, meaning they can only be exercised on the current 
object. However, you can override these defaults if you are making the rights 
assignment on a container. This lets you grant a trustee the ability, for 
example, to manage specific properties in an entire branch of the tree. 


Each rights assignment is stored as a separate entry in the ACL property of the 
object that the rights assignment controls access to. Each ACL entry includes 
the trustee name, the assigned rights, the rights type, and the inheritability 

setting. The following diagram shows examples of ACL properties for three 


objects in a tree. 


® [Root] 
sn Accounting — 
aa Marketing \ 
L 8 DJones 


ACL 
[Public] Browse object 
[Public] Read all prop 
Marketing Write all prop 

ACL 
IRF Wate- all prop 
DJones Write all prop 

ACL 
DJones zero object 
DJones zero all prop 


[Inheritable) 
(Inheritable) 
{Inheritable) 


(Inheritable) 


{Inheritable) 
[Inheritable) 
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Inherited Rights Filter 


Default Rights 


In the above diagram, note the ACL for the Accounting container. The first 
entry in the ACL specifies "IRF" as the trustee name. Such an entry represents 
an inherited rights filter (IRF). An IRF blocks inheritable rights assigned 
higher in the tree from being exercised on the current object and its 
subordinates. An IRF applies globally to all trustees holding the type of rights 
specified in the IRF. For example, in the above tree, the IRF prevents all 
trustees (in this case, only Marketing) from exercising the Write all properties 
right on the Accounting container and on the subordinate Acctg_Vol object. 
Note that the IRF doesn’t apply to DJones, since his Write right is assigned on 
the current object rather than higher in the tree. Note also that the IRF 
wouldn't apply if a trustee were granted (higher in the tree) the Write right to 
a specific property rather than to all properties. 


During installation of NDS, the following default rights assignments are 
made. 


+ User Admin is granted the Supervisor right at the root of the tree. This 
effectively gives the administrator all rights in the NDS tree and in any 
NetWare file systems accessible from the tree. 


¢ The [Public] trustee is granted the Browse right at the root of the NDS 
tree. This enables all objects, by security equivalence to [Public], to 
browse the tree. 


If you want users to have rights beyond these defaults, you must make trustee 
assignments or grant security equivalences. Note that some object creation 
operations make additional rights assignments by default both in NDS and in 
the NetWare file system. For details, see the online help for the utility you are 
using. 


Security Equivalence 


Besides having explicit and inherited rights to an NDS object, a user can also 
have rights by security equivalence to another NDS object. For example, if a 
user is a member of a group and that group has been granted certain rights, the 
user effectively has those additional rights by security equivalence. 


A user is automatically security equivalent to the groups and organizational 
roles that he or she belongs to and is implicitly security equivalent to the 
[Public] trustee and to each container above the user in the tree, including 
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[Root]. In addition, you can explicitly grant a user security equivalence to any 
NDS object by adding that object to the user’s Security Equals property. 


Effective Rights in NDS 


When a user attempts an action on an NDS object or property, NDS calculates 
that user’s effective rights to the object or property to see if the action is 
authorized. In doing so, NDS considers the user’s explicit rights, inherited 
rights, and security equivalences. Both ConsoleOne and NetWare 
Administrator let you query NDS for a user’s effective rights to any object or 
property, so in theory you should never need to calculate effective rights 
yourself. However, in practice you need to understand in some detail how this 
process works so you can effectively administer and troubleshoot NDS rights. 
Following is the process used by NDS to calculate effective rights. 


NOTE: This process is similar to, but not the same as, the process used by the NetWare 
file system to calculate a user's effective rights to a file or folder on a NetWare volume. 
For information on that process, see “Effective Rights in NetWare” on page 23. 


To calculate a user’s effective rights to an object or property, 
1 Determine which objects the user is security equivalent to. 


2 For the user and each object that the user is security equivalent to, 
determine its effective rights as follows. 


2a Starting at the root of the tree, check whether the user (or object) is 
assigned any inheritable rights. If so, use these rights as the initial 
effective rights. 


2b Descend a level in the tree along the branch containing the target 
object or property. 


2c Remove any rights that are blocked by inherited rights filters at this 
level. 


2d Check whether the user (or object) is assigned any inheritable rights 
at this level. If so, apply the assigned rights by adding any that 
correspond to types not yet in the effective rights and by replacing 
any that correspond to types already in the effective rights. 


2e Check whether the current level is the target object (or the object 
containing the target property). If so, continue with the next substep. 
If not, return to Step 2b. 


2f Check whether the user (or object) is assigned any noninheritable 
rights at this level. If so, apply the assigned rights by adding any that 
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correspond to types not yet in the effective rights and by replacing 
any that correspond to types already in the effective rights. 


3 Add up the effective rights of the user and the objects that the user is 
security equivalent to. 


4 Add any rights that are implied by the other rights. 


For example, suppose DJones is trying to access Acctg_Vol in the following 


tree. 
ACL 
[Public] Browse object  (Inheritable) 
[Public] Read all prop (Inheritable) 
Marketing Write all prop (Inheritable) | 
® [Root] - 
. ACL 
sa Accounting — pp Wete- all prop (n/a) 
EAT Djones Write all prop (Inheritable) 


¿ña Marketing \ 


L 8 DJones ACL 
DJones zero object (Inheritable] 
DJones zero  allprop (Inheritable] 


Here’s how NDS would calculate DJones’ effective rights. 
1 DJones is security equivalent to Marketing, [Root], and [Public]. 


This assumes DJones doesn’t belong to any groups or organizational roles 
and hasn’t been explicitly assigned any security equivalences, as 
explained in “Security Equivalence” on page 14. 


2 The effective rights of DJones and the objects he is security equivalent to 
are as follows. 





Trustee Effective Rights Explanation 

DJones zero object, Although DJones is assigned the Write right to all properties at the 
zero all Accounting container and the assignment is inheritable, the 
properties assignment is replaced by the assignment of zero rights to all 


properties at Acctg_Vol. 


Marketing zero all Although Marketing is assigned the Write right to all properties at 
properties the root of the tree and the assignment is inheritable, the Write 
right is blocked by the IRF on the Accounting container. 


[Root] (no rights) There are no entries for [Root] in any of the ACL properties in the 
pertinent branch of the tree. 
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Trustee Effective Rights Explanation 





[Public] Browse object, These rights are assigned to [Public] at the root of the tree and are 
Read all not blocked or reassigned anywhere in the pertinent branch of the 
properties tree. 


3 Adding up the rights of all the trustees, we get the following effective 
rights: Browse object, Read all properties. 


4 The Read right implies the Compare right, so DJones’ final effective 
rights to Acctg_Vol are: Browse object, Read and Compare all 
properties. 


NDS Schema 


The NDS schema defines the classes of NDS objects (such as User, Printer and 
Group) that can be created in your NDS tree and which information is required 
or optional at the time the object is created. Every type of object in an NDS 
tree has a class defined for it in the tree’s schema. 


The base schema is the schema that ships with NDS. Any modifications to the 
base schema — such as adding a new class or attribute — are called schema 
extensions. 


You don't need to extend the schema, but you have the ability to do so. The 
Schema Manager tool in ConsoleOne lets you extend the schema as needed to 
meet your organizational needs. For example, if your organization requires 
special footwear for employees and you want to keep track of employee shoe 
size, you can create a new attribute called Shoe Size and add it to the User 
class. 


Schema Manager Tool 


Schema Manager is accessed through the Tools menu in ConsoleOne. It 
allows those with supervisor rights to a tree (normally user Admin) to extend 
the schema of that tree. Before selecting it from the Tools menu, select the tree 
(or an object within the tree) whose schema you want to modify. For 
instructions on using Schema Manager to perform specific tasks, see 
“Managing” on page 35. 


The Schema Manager tool in ConsoleOne has some features that aren’t 
available in the Windows-based Schema Manager tool in NDS Manager: 


+ Create auxiliary classes 
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Object Classes 


An auxiliary class is an ad hoc set of attributes that another application 
associates with particular object instances rather than with an object class 
as a whole. For example, LDAP applications use auxiliary classes. 


+ Assign ASN.1 identifiers to classes and attributes 


ASN.1 identifiers let you uniquely identify each class and attribute in 
your schema. For more information, see ASN1 ID (../../clhelp/ 
novell_schema/schemaASN1.htm) in the Schema Manager online help. 


WARNING: You should assign only registered ASN1 identifiers to classes and 
attributes. Otherwise, skip the ASN1 ID field when creating a class or attribute. 


A class is like a template or form for creating an NDS object. An NDS object 
is an actual record in the NDS database built according to the specifications of 
a particular class. When you create an NDS object, you select a class and then 
fill in the required data. 


Each class has a name, some flags, an inheritance class that supplies the initial 
set of attributes, additional attributes (if any), and containment rules. Classes 
are named like NDS object types - User, Printer, Group - yet they are just 
structure and rules, no content. 


Object Attributes 


If a class is like a form, then an attribute is one field on the form. When you 
create an attribute, you give it a name (such as "employee number") and a 
syntax. From then on, it is available in the attribute list. 


NOTE: In other parts of ConsoleOne besides Schema Manager, attributes are 
generally called properties. 


Attribute Syntax 


An attribute’s syntax is the type of data it can contain, such as "string A-Z, 0- 
9" or "number -999 to 999." Once an attribute is created, you can't change its 
syntax (you have to delete the attribute and recreate it with the correct syntax). 


The syntaxes you can choose from when creating an attribute are listed below. 
A description of each is provided in the Schema Manager online help. 


+ BackLink(../../C1help/novell_schema/schemaS yntax_Back_Link.htm) 


+ Boolean (../../C1help/novell_schema/schemaS yntax_Boolean.htm) 
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Case Exact String (../../C1help/novell_schema/ 
schemaS yntax_Case_Exact_String.htm) 


Case Ignore List (../../C1help/novell_schema/ 
schemaSyntax_Case_Ignore_List.htm) 


Case Ignore String (../../C lhelp/novell_schema/ 
schemaSyntax_Case_Ignore_String.htm) 


Class Name (../../C Lhelp/novell_schema/ 
schemaSyntax_Class_Name.htm) 


Counter (../../C1help/novell_schema/schemaSyntax_Counter.htm) 


Distinguished Name (../../C1help/novell_schema/ 
schemaSyntax_Distinguished_Name.htm) 


Email Address (../../C1help/novell_schema/ 
schemaSyntax_Email_Address.htm) 


Facsimile Telephone Number (../../C1help/novell_schema/ 
schemaSyntax_Facsimile_Telephone_Numbe.htm) 


Hold (../../C1help/novell_schema/schemaSyntax_Hold.htm) 
Integer (../../C Lhelp/novell_schema/schemaSyntax_Integer.htm) 
Interval (../../C1help/novell_schema/schemaSyntax_Interval.htm) 


Net Address (../../C lhelp/novell_schema/ 
schemaS yntax_Net_Address.htm) 


Numeric String (../../C lhelp/novell_schema/ 
schemaSyntax_Numeric_String.htm) 


Object ACL (../../C1help/novell_schema/ 
schemaSyntax_Object_ACL.htm) 


Octet List (../../C1help/novell_schema/schemaS yntax_Octet_List.htm) 


Octet String (../../C1help/novell_schema/ 
schemaSyntax_Octet_String.htm) 


Path (../../C1help/novell_schema/schemaS yntax_Path.htm) 


Postal Address (.../../C1help/novell_schema/ 
schemaSyntax_Postal_Address.htm) 


Printable String (../../C1help/novell_schema/ 
schemaSyntax_Printable_String.htm) 
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+ Replica Pointer (../../C1help/novell_schema/ 
schemaSyntax_Replica_Pointer.htm) 


+ Stream (../../C1help/novell_schema/schemaSyntax_Stream.htm) 


+ Telephone Number (../../C1help/novell_schema/ 
schemaSyntax_Telephone_Number.htm) 


+ Time (../../C1help/novell_schema/schemaSyntax_Time.htm) 
+ Timestamp (../../C1help/novell_schema/schemaSyntax_Timestamp.htm) 


+ Typed Name (../../C1help/novell_schema/ 
schemaSyntax_Typed_Name.htm) 


+ Unknown (../../C1help/novell_schema/schemaS yntax_Unknown.htm) 


Mandatory and Optional Attributes 


A class is a set of attributes organized in a meaningful way. Some of these 
attributes are mandatory and some are optional. 


A mandatory attribute is one that must be filled in when an object is created. 
For example, if a new object is being created based on the User class, which 
has Last Name as a mandatory attribute, the new object cannot be created 
without filling in the last name. 


An optional attribute is one that can be filled in if desired but otherwise can be 
left out. For example, if a new object is being created based on the User class, 
which has Fax Number as an optional attribute, then the new object can be 
created with or without specifying a fax number. An exception to the rule is 
that when an optional attribute is used for naming, the attribute becomes 
mandatory. 


NetWare File Systems 


The following table summarizes the NetWare file system management 
capabilities of ConsoleOne. For instructions on using these capabilities to 
perform specific tasks, see “Managing” on page 35. For more background 
information on NetWare file systems, see Traditional File Services and Novell 
Storage Services (NSS). 
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Capability 


Description 





Browsing file 
systems 


Managing files 
and folders 


Setting 
attributes 


Administering 
rights 


Controlling 
allocation of 
disk space 


Viewing and 
modifying file 
system 
information 





In ConsoleOne, you browse NetWare volumes, folders, and files like any other objects. 
You can browse both traditional NetWare volumes and Novell Storage Services (NSS) 
volumes. Volumes and folders are container objects that you can open and close by 
double-clicking, and files are leaf objects that you can manipulate and define properties 
for. 


In ConsoleOne, you use standard menu options like Cut, Copy, and Paste to copy and 
move files and folders within the file system. Menu options are also provided for 
creating, renaming, and deleting files and folders. For limitations on managing files and 
folders, see “Known Limitations” on page 47. 


In ConsoleOne, system attributes of individual files and folders are listed as properties 
of those files and folders. Using these property pages, you can set and remove 
attributes as needed. This enables you to apply certain global access controls on 
specific files and folders and to define special handling for individual files and folders 
during processes like data compression, backup, and migration. For more information 
on file system attributes, see “NetWare Access Control” on page 21. 


In ConsoleOne, users’ rights to access individual files and folders are listed as 
properties of those files and folders. Filters for blocking the inheritance of rights are also 
listed as properties of individual files and folders. Using these property pages, you can 
set rights assignments, edit rights filters, and view individual users’ effective 
(calculated) rights. This enables you to control access to the file system on a user-by- 
user basis. For more information on file system rights, see “NetWare Access Control” 
on page 21. 


In ConsoleOne, restrictions on the amount of volume space that individual users can 
use are listed as properties of volume objects. Limits on the size that individual folders 
can grow to are listed as properties of those folders. Using these property pages, you 
can set up and remove such restrictions as needed to manage the allocation of disk 
space in the file system. 


In ConsoleOne, information about individual files and folders, such as who the owner 
is and when the file or folder was last modified, is listed as properties of those files and 
folders. Similar information about volumes (both traditional and NSS), including 
information about the system features enabled on volumes and current usage 
statistics, is listed as properties of volume objects. Using these property pages, you can 
view and modify such information as needed to monitor and control file system activity. 


NetWare Access Control 


The NetWare file system uses two mechanisms to control users’ access to files 
and folders on NetWare volumes: 
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+ Attributes 


+ Rights 
File System Attributes 


Attributes are simpler than rights in terms of how they operate. An attribute is 
a system flag that you can set or remove on a particular file or folder to instruct 
the file system to handle that file or folder in a particular way. Unlike rights, 
attributes apply the same for all users who attempt an action on the file or 
folder. 


The set of attributes you can apply is slightly different for files than it is for 
folders. For details, see Attributes (File) (../../clhelp/novell_fs/fileattrs.html) 
and Attributes (Folder) (../../c lhelp/novell_fs/folderattrs.html) in the 
ConsoleOne online help. 


File System Rights 


Like attributes, rights are system flags that you can set on a particular file or 
folder to control access to that file or folder. However, unlike attributes, rights 
are linked with a particular user, group, or other NDS object. This object is the 
possessor of the rights and is called the trustee. The particular set of rights held 
by the trustee is called the rights assignment. On a given file or folder, you can 
add multiple rights assignments, each associated with a different trustee. To 
see descriptions of the individual file system rights, see Rights (File System) 
(../../c Lhelp/novell_fs/rights.html) in the ConsoleOne online help. 


Rights assignments on a folder are inherited by the trustee to objects within 
that folder, so that the trustee can exercise those rights on subordinate files and 
folders without having an explicit rights assignment on the subordinate files 
or folders. You can, however, place a filter on individual subordinate files and 
folders to block specific rights from being inherited. Such filters apply 
globally to all trustees holding the specified rights. 


Besides having explicit and inherited rights to a file or folder, a user can also 
have rights to a file or folder through security equivalence to another NDS 
object. For example, if a user is a member of an NDS group and that group has 
been granted certain rights, the user effectively has those additional rights 
through security equivalence. For more information, see “Security 
Equivalence” on page 14. 
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Effective Rights in NetWare 


When a user attempts an action on a file or folder on a NetWare volume, the 
NetWare file system calculates that user’s effective rights to the file or folder 
to see if the action is authorized. In doing so, the system considers the user’s 
explicit rights, security equivalences, and inherited rights. Both ConsoleOne 
and NetWare Administrator let you query the file system for a user’s effective 
rights to any file or folder, so in theory you should never need to calculate 
effective rights yourself. However, in practice you need to understand in some 
detail how this process works so you can effectively administer and 
troubleshoot rights. Following is the process used by the file system to 
calculate effective rights. 


NOTE: This process is similar to, but not the same as, the process used by NDS to 
calculate a user’s effective rights to an NDS object or property. For information on that 
process, see “Effective Rights in NDS” on page 15. 


To calculate a user’s effective rights to a file or folder, 


1 Check whether the user effectively has the Supervisor right to the 
NetWare server where the target file or folder resides. If so, the user 
effectively has all rights in the file system of that server, and you can skip 
the rest of this process. If not, continue with the next step. 


2 Determine which NDS objects the user is security equivalent to. 


For information on how to do this, see “Security Equivalence” on page 
14. 


3 Descend to the next level in the file system along the path to the target file 
or folder. 


Note that the next level below the NetWare server is the root folder of the 
volume. 


4 Check whether the user, or any of the objects that the user is security 
equivalent to, is assigned the Supervisor right at the current level. If so, 
the user effectively has all rights from this level down in the file system, 
and you can skip the rest of this process. If not, continue with the next 
step. 


5 Do the following for the user and each object that the user is security 
equivalent to: 


5a Check whether the user (or object) is assigned any non-Supervisor 
rights at the current level. If so, set the effective rights of the user (or 
object) to the rights specified in the assignment, and then skip to Step 
6. If not, continue with the next substep. 
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5b Remove from the current effective rights any rights that are blocked 
by an inheritance filter at the current level. 


6 If the current level of the file system is the target file or folder, the user’s 
final effective rights are the sum of his or her current effective rights and 
the current effective rights of each object that the user is security 
equivalent to. If you haven’t reached the target file or folder yet, return to 
Step 3. 
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Planning 


This chapter specifies the system requirements for ConsoleOne™, when to use 
it versus other tools such as NetWare® Administrator, and how to retain 
ConsoleOne snap-ins installed by other products. It also provides basic 
planning guidelines for extending the NDS™ schema and for managing login 
time restrictions for remote users. 


System Requirements 
ConsoleOne can run on a Windows* workstation or a NetWare server. 


Workstation Requirements 
Q Windows 95, 98, or NT* 


Q 64 MB RAM with an equal amount of virtual memory (swapper space), 
more RAM will improve performance 


Q 200 MHz or faster processor 


Q NetWare 5 client software 





Q 25 MB free disk space for a local installation 


Server Requirements 
Q NetWare 5 Support Pack 3 
Q 64 MB free RAM (128 MB total recommended) 


To determine the current free memory, multiply the Total Cache Buffers 
(shown on the main MONITOR.NLM information screen) by 4096. 


Q 200 MHz or faster processor 
Q 25 MB free disk space 
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Q 800 x 600 screen resolution 


ConsoleOne versus Other Tools 





Task 


Novell® is in the process of migrating all management functions into 
ConsoleOne. However, currently you must still use legacy tools like NetWare 
Administrator for some tasks. The following table provides guidelines for 
specific tasks. See also the specific limitations listed in “Known Limitations” 
on page 47. 


Tool to Use 


Explanation 





Browse an NDS 
tree 


Search for NDS 
objects 


Create an NDS 
object 


Define a user 
template 





ConsoleOne or 
NetWare 
Administrator 


ConsoleOne or 
NetWare 
Administrator 


ConsoleOne or 
NetWare 
Administrator 


ConsoleOne or 
NetWare 
Administrator 
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In most cases, either tool works fine. However, if the tree is 
running NDS 8 and has containers with thousands of objects, 
browsing it in ConsoleOne is faster and more consistent, whereas 
NetWare Administrator is slower opening large containers and is 
limited by available RAM. On the other hand, if the NDS tree 
doesn't have very large containers, NetWare Administrator has 
the advantages that you can open multiple trees simultaneously, 
customize and navigate views more easily, and save your view 
preferences. 


In most cases, either tool works fine. However, ConsoleOne 
displays only the first 2,000 objects returned from a search, 
whereas NetWare Administrator displays as many as can fit in 
available RAM. 


In most cases, either tool works fine. However, ConsoleOne can 
create any object type defined in your schema, including new 
types you've added. NetWare Administrator can only create object 
types for which it has custom snap-ins. In addition, ConsoleOne 
makes it easier to assign and view object names with dots in them, 
such as Dan.Jones. 


In most cases, either tool works fine. However, ConsoleOne has 
some limitations on the user properties you can define in a 
template. Specifically, you must use NetWare Administrator to 
define rights assignments, scripted environment setup, and 
volume space restrictions in a user template. 


Task 


Tool to Use 





Explanation 





Manage object 
properties 


Manage print 
services 


Delete a 
NetWare server 
object 


Check the NDS 
version ona 
server 


Manage NDS 
partitions and 
replicas 


Manage the 
NDS schema 


Manage 
NetWare file 
systems 


Set an account 
balance fora 
user 


Set up 
accounting 
charges ona 
NetWare server 


Manage other 
Novell services 


ConsoleOne or 
NetWare 
Administrator 


NetWare 
Administrator 


NDS Manager™ 


NDS Manager 


NDS Manager 


ConsoleOne or 
NDS Manager 


ConsoleOne or 
NetWare 
Administrator 


ConsoleOne or 
NetWare 
Administrator 


NetWare 
Administrator 


Depends on the 
service 


In most cases, either tool works fine. However, ConsoleOne lets 
you modify multiple objects of any class in a single operation, 
whereas NetWare Administrator lets you do this only on user 
objects. NetWare Administrator provides custom property pages 
for more object types than ConsoleOne, but ConsoleOne lets you 
generically edit any property defined in your schema, including 
properties you've added. 


Not available in ConsoleOne yet. 


Not available in ConsoleOne yet. 


Not available in ConsoleOne yet. 


Not available in ConsoleOne yet. 


In most cases, either tool works fine. However, you must use 
ConsoleOne to create auxiliary classes and to assign ASN1 
identifiers to classes and attributes. You must use NDS Manager 
to generate schema reports. 


In most cases, either tool works fine. However, you must use 
NetWare Administrator to salvage or purge deleted files. 


Either tool works fine. However, for the accounting system to 
actually work, you must also set up accounting charges on one or 
more NetWare servers. 


Not available in ConsoleOne yet. 


Some Novell services have not shipped ConsoleOne snap-ins yet. 
For example, at the time of this publishing you must use NetWare 
Administrator to manage DNS/DHCP, ZENworks™, GroupWise®, 
BorderManager*M, Novell Replication Services™, Novell 
Distributed Print Services™, and NetWare for SAA*. 
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Snap-ins from Other Products 


If you installed or will install a product that includes ConsoleOne snap-ins and 
you want to retain those snap-ins in this release of ConsoleOne, make sure 
those snap-ins are installed in the same place as this release of ConsoleOne. 
Here are some points to consider: 


+ ConsoleOne 1.2 snap-ins are compatible with this release of ConsoleOne, 
but ConsoleOne 1.1 snap-ins aren’t. 


If your product provides only ConsoleOne 1.1 snap-ins, you might want 
to install this release of ConsoleOne in a different place than ConsoleOne 
1.1. By default, ConsoleOne 1.1 is installed on the NetWare server in 
SYS:\PUBLIC\MGMT\CONSOLE1. 


+ Novell products typically install ConsoleOne snap-ins on the SYS 
volume of a NetWare server. For example, NDS 8 installs ConsoleOne 
1.2, an LDAP snap-in, and a remote console snap-in in 
SYS:\PUBLIC\MGMT\CONSOLEONE\1.2. 


¢ Ifyou install this release of ConsoleOne on the SYS volume of a NetWare 
server, it overwrites ConsoleOne 1.2 and disables ConsoleOne 1.1. 
However, existing ConsoleOne 1.2 snap-ins are retained. 


¢ If you install this release of ConsoleOne completely locally on a 
workstation, other products might not be able to find the right place to add 
snap-ins to the installation. In such a case, it is up to you to move any 
snap-ins from other products into the new installation. 


NDS Schema Extensions 


Designing the schema of your NDS tree can save time and effort in the long 
run. You can view the base schema in ConsoleOne and determine if it meets 
your needs or if modifications are required. 


The most common type of modification needed is to add attributes to an 
existing object class, such as User. You can only add optional attributes to 
existing classes. No other modifications are allowed. 


If you need to create an entirely new class of objects, select as the inheritance 
class a class that has as many of the needed attributes as possible, and then add 
any other attributes you need. The additional attributes can be added as 
mandatory, naming, or optional attributes. 
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Login Time Restrictions for Remote Users 


On the Login Time Restrictions property page of user objects in ConsoleOne, 
you can restrict the times when users can be logged in to NDS. (By default, 
there are no login time restrictions.) If you set a login time restriction for a user 
and he or she is logged in when the restricted time arrives, the system issues a 
warning to log out within five minutes. If the user is still logged in after five 
minutes, he or she is logged out automatically and loses any unsaved work. 


If a user logs in remotely from a different time zone than the server processing 
the login request, any login time restrictions that have been set for the user are 
not adjusted for the time difference. For example, if you restrict a user from 
logging in Mondays from 1:00 a.m. to 6:00 a.m. and the user logs in remotely 
from a time zone that is one hour later than the server, the restriction 
effectively becomes 2:00 a.m. to 7:00 a.m. for that user. 
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Setting Up 


This chapter explains how to install and start ConsoleOne™ on a NetWare® 
server or a Windows* workstation. 


Installing ConsoleOne 


NOTE: If you have already installed a product that includes ConsoleOne 1.2b, such as 
NDS™ 8, you don’t need to complete this procedure, unless you want to install 
ConsoleOne completely locally on a workstation and your product doesn’t give you that 
option. If your product has already installed ConsoleOne to your satisfaction, skip to 
“Starting ConsoleOne on a Windows Workstation” on page 32 or “Starting ConsoleOne 
on a NetWare Server” on page 33. 


1 


2 


Make sure the server or workstation where you will install ConsoleOne 
meets the “System Requirements” on page 25. 


If a previous version of ConsoleOne is running on the workstation or 
server where you will install ConsoleOne, exit that version of 
ConsoleOne. 


Download the latest release of ConsoleOne from the Novell Free 
Downloads web site (http://www.novell.com/download). 


Run the ConsoleOne installer by double-clicking the file you just 
downloaded. 


When the installer prompts you for the location to install ConsoleOne, 
choose a local drive or a drive mapped to a NetWare server. 


Important: If you want to retain ConsoleOne snap-ins provided by other 
products as explained in “Snap-ins from Other Products” on page 28, 
choose a server drive. Installing to a server also enables you to run 
ConsoleOne on any workstation with a drive mapped to the server. 
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6 When the installation is done, restart the workstation if the installer 
prompts you to do so. 


If you encounter problems during installation, see “Troubleshooting” on page 
47. 


Starting ConsoleOne on a Windows Workstation 


NOTE: This procedure applies to starting ConsoleOne for the first time on a Windows 
workstation or an NT server. After the first time, you can just double-click the 
ConsoleOne icon on the desktop. 


1 If the latest release of ConsoleOne is already set up on the workstation, 
skip to Step 7. Otherwise, continue with the next step. 


2 Map a drive (with a letter, not a UNC path) to the server volume where 
ConsoleOne is installed. 


3 Run SETUP.EXE, located on the server volume in 
\PUBLIC\MGMT\CONSOLEONE\1.2\INSTALL. 


4 Follow the instructions on the screen to complete the ConsoleOne setup. 


Note: The setup program configures the workstation to run ConsoleOne 
using the server drive mapping, but it doesn’t install ConsoleOne locally. 
Depending on your Novell client version, it may install a couple of newer 
client .DLL files and prompt you to restart the workstation. 


5 When the setup is done, restart the workstation if you are prompted to do 
so. 


6 Check that you still have a drive mapped to the server volume where 
ConsoleOne is installed. If not, create a permanent drive mapping to the 
server volume. 


7 If you want ConsoleOne to use your local time zone rather than GMT 
(Greenwich Mean Time), set the TZ environment variable as explained in 
“ConsoleOne Doesn't Use My Local Time Zone” on page 50. Otherwise, 
skip this step. 


8 Double-click the ConsoleOne icon on the desktop. 


ConsoleOne appears. It should look something like this: 
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For information on navigating in ConsoleOne and performing management 
tasks, see “Managing” on page 35. 


Starting ConsoleOne on a NetWare Server 
1 Make sure the latest release of ConsoleOne is installed on the server as 
explained in “Installing ConsoleOne” on page 31. 
2 Do either of the following to start ConsoleOne: 
+ Type CISTART at the server console. 
+ Switch to the server GUI > click the servertop > ConsoleOne. 


3 At the login prompt, enter your NDS context, username, and password > 
click OK. 


ConsoleOne appears. It should look something like this: 
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For information on navigating in ConsoleOne and performing management 


tasks, see “Managing” on page 35. If you encounter problems starting 
ConsoleOne, see “Troubleshooting” on page 47. 
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Managing 


This chapter provides guidance on performing management tasks in 
ConsoleOne™. We assume that you have already set up and started 
ConsoleOne as explained in “Setting Up” on page 31. If you encounter 
problems performing these tasks, see “Troubleshooting” on page 47. 


Basic Management Tasks 


In ConsoleOne, the network and its resources are presented as a set of objects 
that are organized into various containers, with My World at the top. In 
general, you perform tasks by browsing to an object, right-clicking it, and then 
choosing an action. The available actions depend on the type of object. For 
example, the New Object action is available only on containers. 


The following table summarizes the basic management tasks you can perform 
and lists the ConsoleOne help topics where you can find step-by-step 
instructions. For information on more specific management tasks, see the 
other sections of this chapter. 
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Task Summary 


ConsoleOne Help Topics 





Browsing and The available network resources are located in 

finding network The Network container. Inside The Network 

resources container are the NDS™ trees that you are logged 
in to plus the Novell Directory Services container, 
which holds the trees that you aren’t logged in to. 
If you click a tree that you aren’t logged in to, you 
are prompted to log in. 


Once you are in an NDS tree and its objects are 
listed in the right pane, you can use various 
features to locate the specific objects you want to 
manage. For details, see the help topics at the 
right. 
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¢ To filter objects from the 
right pane (../../c1help/ 
novell_ndsadmin/ 
filterview.html) 


+ To jump to an object in the 
list (../../c1help/ 
novell_consoleone/ 
find.html) 


+ To go to an object by full 
name (../../c1help/ 
novell_ndsadmin/ 
gotoobject.html) 


+ To find an object by type (../ 
../c1help/novell_ndsadmin/ 
findtype.html) 


¢ To find one or more objects 
by property value (../../ 
c1help/novell_ndsadmin/ 
findprop.html) 


Task 


Summary 


ConsoleOne Help Topics 








Creating and 
manipulating 
objects 


Once you have located the network resources you 
want to manage, you can change their behavior 
by modifying their object properties. You can also 
delete, move, and rename objects or create new 
ones as needed. For details, see the help topics at 
the right. 


+ 


To create an object (../../ 
c1help/novell_consoleone/ 
create.html) 


+ To modify an object's 


properties (../../c1help/ 
novell_consoleone/ 
modify.html) 


To modify multiple objects 
simultaneously (../../c1help/ 
novell_ndsadmin/ 
modifymultiple.html) 


To rename an object (../../ 
c1help/novell_ndsadmin/ 
rename.html) 


To move one or more 
objects (../../c1help/ 
novell_ndsadmin/ 
move.html) 


To delete one or more 
objects (../../c1help/ 
novell_ndsadmin/ 
delete.html) 
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Task Summary ConsoleOne Help Topics 
Organizing Once you are in an NDS tree, you can organize it + To create a Country object 
NDS trees by creating various types of containers. You can (../../c1help/ 
also create aliases to provide access to the same novell_ndsadmin/ 
objects from multiple locations. For details, see createcountry.html) 
the hel i he right. ; ; 
ene ptopics'attnerignt To create a Locality object 
Note: For general design considerations when (../../.c1help/ 
organizing an NDS tree, see NDS Concepts and novell_ndsadmin/ 
Planning (http://www.novell.com/documentation/ createlocality.html) 
Ig/nw5/usnds/basicenu/data/n0000001.htm)). To create an Organization 
object (../../c1help/ 
novell_ndsadmin/ 
createo.html) 
To create an Organizational 
Unit object (../../c1help/ 
novell_ndsadmin/ 
createou.html) 
To create an Alias object (../ 
../c1help/novell_ndsadmin/ 
createalias.html) 
Customizing You can customize the views in both the left and To set the top object in the 
views right pane in various ways. For example, you can left pane (../../c1help/ 


set a different object than My World at the top of 
the left pane, and you can adjust the column width 
in the right pane. In an NDS tree, you can filter 
objects from view in the right pane. For details, 
see the help topics at the right. 


Note: Customizations to the left and right pane are 
lost when you exit ConsoleOne. 


novell_consoleone/ 
settop.html) 


To adjust the column width 
in the right pane (../../ 
c1help/novell_consoleone/ 
adjustcol.html) 


To filter objects from the 
right pane (../../c1help/ 
novell_ndsadmin/ 
filterview.html) (NDS only) 


Managing User Accounts 


The following table summarizes the user management tasks you can perform 
and lists the ConsoleOne help topics where you can find step-by-step 
instructions. For background information and limitations on these capabilities 
in ConsoleOne, see “NDS Objects” on page 11. 
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Task 


Summary 


ConsoleOne Help 
Topics 








Creating user 
objects 


Defining a 
template for 
creating user 
objects 


Setting up 
optional 
account 
features 


To set up a user account, you must create a user object in 
NDS. This object specifies the user’s login name and supplies 
other information used by NDS and NetWare® for access 
control. For details, see the help topic at the right. 


If you want to define user properties ahead of time, before 
actually creating one or more user objects, you can create a 
user template. For details, see the help topic at the right. 


During or after user object creation, you can optionally set up 
the user’s network computing environment, an account 
balance for usage of network services, and various login 
security measures such as passwords, time limits, and 
location restrictions. For details, see the help topics at the 
right. 


Note: If you set up login time restrictions for remote users, note 
the behavior explained in “Login Time Restrictions for Remote 
Users” on page 29. 


+ TO Create a 


User object (../ 


../c1help/ 


novell_ndsadm 


in/ 


createuser.html 


) 


+ To create a 
Template 
object (../../ 
c1help/ 


novell_ndsadm 


in/ 


createtemplate. 


html) 


+ To set up 
account 


resources (../../ 


c1help/ 


novell_ndsadm 


in/ 


setupresources 


html) 


+ To set up login 


security (../../ 
c1help/ 


novell_ndsadm 


in/ 


setuplogin.html 


) 
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Task Summary ConsoleOne Help 
Topics 





Setting up login You can create login scripts to automate users’ connections to + To create a 


scripts network files, printers, and other such resources. You can login script (../ 
associate a login script with a user, the user’s container, or a ../c1help/ 
user profile. For details, see the help topics at the right. novell_ndsadm 
in/ 
Note: For information on login script commands, see Login createscript.ht 
Script Commands and Variables. ml) 


+ To create a 
Profile object 
(../../c1help/ 
novell_ndsadm 
in/ 
createprofile.ht 
ml) 


+ To assign a 
profile to a user 
(../../c1help/ 
novell_ndsadm 
in/ 
assignprofile.ht 
ml) 





Controlling Access to Resources 


You can control access to two types of resources in ConsoleOne: 
+ NDS objects and properties 


Access to these resources is controlled by NDS rights as explained in 
“NDS Rights” on page 12. 


+ Files and folders on NetWare volumes 


Access to these resources is controlled by NetWare file system rights and 
attributes as explained in “NetWare Access Control” on page 21. 


The following table summarizes the access control tasks you can perform and 
lists the ConsoleOne help topics where you can find step-by-step instructions. 
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Task 


Summary 


ConsoleOne Help Topics 





Making explicit 
rights 
assignments 


Blocking rights 
inheritance 


When a user's default rights and group or 
role memberships provide insufficient 
access for the user to complete his or her 
work, you can explicitly grant the user rights 
to the particular objects, properties, files 
and folders that he or she needs to work 
with. For details, see the help topics at the 
right. 


In NDS, rights assignments on containers 
can be inheritable or non-inheritable. In the 
NetWare file system, all rights assignments 
on folders are inheritable. In both NDS and 
NetWare, you can block such inheritance so 
that the rights aren't effective on individual 
subordinate items. For details, see the help 
topics at the right. 


+ To grant or deny explicit rights to 


an object or property (../../c1help/ 
novell_ndsadmin/ 
grantrights.html) (NDS) 


To delete a trustee (explicit rights) 
assignment (../../c1help/ 
novell_ndsadmin/delrights.html) 
(NDS) 


To grant or deny explicit rights to 
a file or folder (../../c1help/ 
novell_fs/grantrights.html) 
(NetWare) 


To delete a trustee assignment (../ 
../c1help/novell_fs/delrights. html) 
(NetWare) 


To block inherited rights to an 
object or property (../../c1help/ 
novell_ndsadmin/ 
blockrights.html) (NDS) 


To block inherited rights to a file or 
folder (../../c1help/novell_fs/ 
blockrights.html) (NetWare) 
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Task 


Summary 





ConsoleOne Help Topics 





Granting 
security 
equivalence 


Viewing 
effective rights 


Setting file 
system 
attributes 


Users can obtain effective rights both in 
NDS and in the NetWare file system 
through security equivalence to other NDS 
objects, such as groups, organizational 
roles, and containers. Some of these 
security equivalences are automatic (by 
membership) and others are implicit (by 
containment) or explicit (by assignment). 
For details, see the help topics at the right. 


You can query NDS or the NetWare file 
system for a user’s effective rights to any 
object, property, file, or folder. Effective 
rights include explicit, inherited, and 
security equivalence rights. For details, see 
the help topics at the right. 


You can set attributes on individual files and 
folders on NetWare volumes to globally 
control access to those files and folders. 
Attributes apply the same to all users and 
take precedence over rights. For details, 
see the help topic at the right. 


+ 


To create an administrator over 
specific properties (../../c1help/ 
novell_ndsadmin/ 
createadmin.html) (NDS) 


To create a Group object (../../ 
c1help/novell_ndsadmin/ 
creategroup.html) (NDS) 


To add a user to a group (../../ 
c1help/novell_ndsadmin/ 
addtogroup.html) (NDS) 


To create an Organizational Role 
object (../../c1help/ 
novell_ndsadmin/createrole.html) 
(NDS) 


To grant a user security 
equivalence to an object (../../ 
c1help/novell_ndsadmin/ 
grantequivalence.html) (NDS) 


To view effective rights to an 
object or property (../../c1help/ 
novell_ndsadmin/ 
checkrights.html) (NDS) 


+ To check effective rights to a file 


+ 


or folder (../../c1help/novell_fs/ 
checkrights.html) (NetWare) 


To set file or folder attributes (../../ 
cthelp/novell_fs/setattrs.html) 
(NetWare) 





Managing NetWare File Services 


The following table summarizes the NetWare file system management tasks 
you can perform and lists the ConsoleOne help topics where you can find step- 
by-step instructions. For background information and limitations on these 
capabilities in ConsoleOne, see “NetWare File Systems” on page 20. 
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Task Summary ConsoleOne Help Topics 
Browsing file To browse a NetWare file system, locate (None) 
systems and double-click the corresponding volume 


Managing files 
and folders 


Setting file and 
folder attributes 


Controlling 
allocation of 
disk space 


object in the NDS tree. You'll see the files 
and folders at the root of the volume. You 
can then double-click folders to browse 
further into the file system as needed. 


Once you are in the part of the file system 

you want to manage, you can copy, move, 

create, rename, and delete files and folders 
as needed. For details, see the help topics 
at the right. 


Note: You can't recover (salvage) or purge 
deleted files in ConsoleOne yet. You must 
still use NetWare Administrator. 


Setting file and folder attributes allows you 
to define special handling for individual files 
and folders during processes like data 
compression, backup, and migration. For 
details, see the help topic at the right. 


You can restrict the amount of volume 
space that individual users can use. You 
can also place limits on the size that 
individual folders can grow to. For details, 
see the help topics at the right. 


To copy files and/or folders (../../ 
cthelp/novell_fs/copy.html) 


To move files and/or folders (../../ 
cihelp/novell_fs/move.html) 


To create a file or folder (../../ 
c1help/novell_fs/create.html) 


To rename a file or folder (../../ 
c1help/novell_fs/rename.html) 


To delete files and/or folders (../../ 
c1help/novell_fs/delete.html) 


To set file or folder attributes (../../ 
cthelp/novell_fs/setattrs.html) 


To restrict a user’s volume space 
(../../c1help/novell_fs/ 
restrictvol.html) 


To restrict a folder’s size (../../ 
c1help/novell_fs/ 
restrictfolder.html) 


To remove a user's space 
restriction on a volume (../../ 
c1help/novell_fs/delvolrestr.html) 


To remove a folder's size 
restriction (../../c1help/novell_fs/ 
delfolderrestr. html) 
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Task Summary ConsoleOne Help Topics 





Viewing and You can view and modify information about + To view or change file or folder 
modifying file individual files and folders, such as who the information (../../c1help/novell_fs/ 
system owner is and when the file or folder was last viewfileinfo.html) 

information modified. You can view similar information 


+ To view or change volume 
information (../../c1help/novell_fs/ 
viewvolinfo.html) 


about volumes (both traditional and NSS), 
including information about the system 
features enabled on volumes and current 
usage statistics. For details, see the help 
topics at the right. 





Extending the NDS Schema 


The following table summarizes the NDS schema management tasks you can 
perform and lists the ConsoleOne help topics where you can find step-by-step 
instructions. For background information on these capabilities in ConsoleOne, 
see “NDS Schema” on page 17. 








Task Summary ConsoleOne Help Topics 
Viewing the To view the schema of an NDS tree, select the tree (None) 
schema or one of its objects > click Tools > Schema Manager. 


You'll see a list of all the object classes and 
attrioutes. Double-click a class or attribute to see 
information about it. 


Extending object You can create new attributes and add them as + To create an attribute 
classes optional attributes to existing object classes. This is (../../c1help/ 
the only modification allowed to existing classes. For novell_schema/ 
details, see the help topics at the right. schemaCreate_an_A 


ttribute.htm) 


+ To add an optional 
attribute to a class (../ 
../c1help/ 
novell_schema/ 
schemaAdd_an_Opti 
onal_Attribute_to_a_ 
C.htm) 





44 ConsoleOne User Guide 


Task 


Summary ConsoleOne Help Topics 








Creating new 
object classes 


Deleting unused 
object classes and 
attributes 


You can create entirely new object classes as + 
needed. For details, see the help topics at the right. 


You can delete unused object classes and attributes + 
that you previously added. For details, see the help 
topics at the right. 


To create a class (../ 
../c1help/ 
novell_schema/ 
schemaCreate_a_Cl 
ass.htm) 


To delete a class (../../ 
c1help/ 
novell_schema/ 
schemaDelete_a_Cla 
ss.htm) 


To delete an attribute 
(../../c1help/ 
novell_schema/ 
schemaDelete_an_At 
tribute. htm) 
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Troubleshooting 


This chapter gives solutions to problems you might encounter when setting up 
and using ConsoleOne™. If this information doesn’t solve your problem, you 
can either contact technical support or check for a ConsoleOne update that 
fixes the problem. 


+ To get free technical support, go to the Novell Support web site (http:// 
support.novell.com/), or contact the vendor from whom you purchased 
the software. 


¢ For direct, charged Novell® technical support, call 1-800-NETWARE. 


¢ To check for ConsoleOne updates, go to the ConsoleOne web site (http:/ 
/www.novell.com/products/ConsoleOne/). 


Known Limitations 


ConsoleOne isn’t yet functionally equivalent to NetWare Administrator and 
NDS™ Manager™. The following are known limitations: 


+ You can’t delete NetWare server objects. Use NDS Manager instead. 


+ When creating a user template, you can’t define trustee (rights) 
assignments, volume space restrictions, or an environment setup script 
like you can in NetWare Administrator. You can, however, apply a 
template that already has these properties defined. 


+ You can set an accounting balance for a user, but for the accounting 
system to work, you must also set up service charges on one or more 
NetWare servers. To do that, you must use NetWare Administrator. For 
details, see the NetWare Administrator online help. 


Additional limitations and quirks are described in the following ConsoleOne 
help topics: 
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+ Why can’t I recover (salvage) or purge deleted files? (../../clhelp/ 
novell_fs/salvpurge.html) 


+ Why can’t a newly created user log in? (../../c lhelp/novell_ndsadmin/ 
usercantlogin.html) 


+ Why are my search results incomplete? (../../clhelp/novell_ndsadmin/ 
badsearch.html) 


+ Why can’t I jump to an object by typing its name? (../../c lhelp/ 
novell_ndsadmin/typedown.html) 


+ Why can’t I select large sets of objects? (../../c lhelp/novell_ndsadmin/ 
pagedresults.html) 


+ Why can’t I apply mass changes to multivalue properties? (../../c Lhelp/ 
novell_ndsadmin/largeapply.html) 


+ Why is the count of objects wrong? (../../c lhelp/novell_ndsadmin/ 
badcount.html) 


+ Why aren't all object types listed? (../../clhelp/novell_ndsadmin/ 
objectnotlisted.html) 


+ Why aren't all property values listed? (../../c help/novell_ndsadmin/ 
valuesnotlisted.html) 


+ Why is the property list in English only? (../../clhelp/novell_ndsadmin/ 
englishproperties.html) 


+ Why can’t I print a view? (../../clhelp/novell_consoleone/print.html) 


+ Why aren't my view customizations saved? (../../clhelp/ 
novell_consoleone/viewlost.html) 


+ Why are some fields and options disabled? (../../c lhelp/ 
novell_consoleone/disabled.html) 


ConsoleOne Malfunctions or Won't Start 


Possible Cause Solution 





The Windows* workstation or NT* Complete the procedure for “Starting ConsoleOne on a Windows 
server you are starting Workstation” on page 32. 

ConsoleOne on doesn't have the 

required drive mapping or Novell 

client .DLL files. 
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Possible Cause Solution 





The NetWare server you are 1. At the server console, type JAVA -VERSION to check the 
starting ConsoleOne on doesn't Java version. 


h *1.1.7b | ` 
avaava SES 2. If you get an "unknown command" message, load Java by 


typing JAVA at the server console > return to Step 1. 
Otherwise, continue with the next step. 


3. If the version is less than 1.1.7b, download and install the 
latest Novell JVM for NetWare from the Novell Developer Kit 
web site (http://developer.novell.com/ndk) > try starting 
ConsoleOne again. 


Performance Is Sluggish 





Possible Cause Solution 





This is often due to a memory problem. Make sure the workstation or server where ConsoleOne is 
At present, Java programs generally use running has sufficient RAM as explained in “System 

more memory than comparable native Requirements” on page 25. If ConsoleOne has been running 
programs. Under tight memory for a long time, you might want to restart it. 

conditions, ConsoleOne might gradually 

slow down, particularly when run on the 

server. 


| Need a Completely Local Workstation Installation 


Possible Cause Solution 





The product that installed ConsoleOne might Complete the procedure for “Installing ConsoleOne” on 
not provide the option to install ConsoleOne page 31, and make sure you choose a local workstation 
completely locally on a workstation. drive to install to. 
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ConsoleOne Doesn’t Use My Local Time Zone 


Possible Cause 


Solution 





When running 
ConsoleOne on a 
workstation, if the 
TZ environment 
variable isn’t set, 
ConsoleOne 
displays times in 
Greenwich Mean 
Time (GMT) and 
interprets any time 
information you 
enter as GMT. 


1. Exit ConsoleOne. 
2. Set the TZ environment variable as explained below. 


3. Try running ConsoleOne again. 


To set the TZ environment variable in Windows 95 or 98, add a SET command 
to the AUTOEXEC.BAT file > restart the workstation. 


To set the TZ environment variable in Windows NT, add the variable on the 
Environment tab in the System control panel. 


Example: SET TZ=MST7MDT 


The first three characters of the value specify your time zone and are required. 
They must be in uppercase. For example, MST means Mountain Standard Time 
(US and Canada), EST means Eastern Standard Time (US and Canada), GST 
means German Standard Time, and so on. 


The fourth character specifies the number of hours offset from GMT, and is 
optional. It doesn't matter whether the offset is the number of hours before or 
after GMT. Either way, you can use an unsigned number. 


The last three characters specify whether daylight savings is in effect, and are 
optional. /f used, they must be in uppercase. For example, MDT means 
Mountain Daylight Time. 
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Novell Trademarks 


Access Manager is a registered trademark of Novell, Inc. in the United States 
and other countries. 


Advanced NetWare is a trademark of Novell, Inc. 


AlarmPro is a registered trademark of Novell, Inc. in the United States and 
other countries. 


AppNotes is a registered service mark of Novell, Inc. in the United States and 
other countries. 


AppNotes is a registered service mark of Novell, Inc. in the United States and 
other countries. 


AppTester is a registered service mark of Novell, Inc. in the United States and 
other countries. 


BrainShare is a registered service mark of Novell, Inc. in the United States and 
other countries. 


C-Worthy is a trademark of Novell, Inc. 
C3PO is a trademark of Novell, Inc. 


CBASIC is a registered trademark of Novell, Inc. in the United States and 
other countries. 


Certified NetWare Administrator in Japanese and CNA-J are service marks of 
Novell, Inc. 


Certified NetWare Engineer in Japanese and CNE-J are service marks of 
Novell, Inc. 


Certified NetWare Instructor in Japanese and CNI-J are service marks of 
Novell, Inc. 


Certified Novell Administrator and CNA are service marks of Novell, Inc. 


Certified Novell Engineer is a trademark and CNE is a registered service mark 
of Novell, Inc. in the United States and other countries. 





Certified Novell Salesperson is a trademark of Novell, Inc. 
Client 32 is a trademark of Novell, Inc. 
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ConnectView is a registered trademark of Novell, Inc. in the United States and 
other countries. 


Connectware is a registered trademark of Novell, Inc. in the United States and 
other countries. 


Corsair is a registered trademark of Novell, Inc. in the United States and other 
countries. 


CP/Net is a registered trademark of Novell, Inc. in the United States and other 
countries. 


Custom 3rd-Party Object and C3PO are trademarks of Novell, Inc. 


DeveloperNet is a registered trademark of Novell, Inc. in the United States and 
other countries. 


Documenter’s Workbench is a registered trademark of Novell, Inc. in the 
United States and other countries. 


ElectroText is a trademark of Novell, Inc. 


Enterprise Certified Novell Engineer and ECNE are service marks of Novell, 
Inc. 


Envoy is a registered trademark of Novell, Inc. in the United States and other 
countries. 


EtherPort is a registered trademark of Novell, Inc. in the United States and 
other countries. 


EXOS is a trademark of Novell, Inc. 
Global MHS is a trademark of Novell, Inc. 


Global Network Operations Center and GNOC are service marks of Novell, 
Inc. 


Graphics Environment Manager and GEM are registered trademarks of 
Novell, Inc. in the United States and other countries. 


GroupWise is a registered trademark of Novell, Inc. in the United States and 
other countries. 


GroupWise XTD is a trademark of Novell, Inc. 
Hardware Specific Module is a trademark of Novell, Inc. 
Hot Fix is a trademark of Novell, Inc. 

InForms is a trademark of Novell, Inc. 


Instructional Workbench is a registered trademark of Novell, Inc. in the 
United States and other countries. 


Internetwork Packet Exchange and IPX are trademarks of Novell, Inc. 
IPX/SPX is a trademark of Novell, Inc. 

IPXODI is a trademark of Novell, Inc. 

IPXWAN is a trademark of Novell, Inc. 
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LAN WorkGroup is a trademark of Novell, Inc. 

LAN WorkPlace is a registered trademark of Novell, Inc. in the United States 
and other countries. 

LAN WorkShop is a trademark of Novell, Inc. 


LANalyzer is a registered trademark of Novell, Inc. in the United States and 
other countries. 





LANalyzer Agent is a trademark of Novell, Inc. 
Link Support Layer and LSL are trademarks of Novell, Inc. 


MacIPX is a registered trademark of Novell, Inc. in the United States and 
other countries. 


ManageWise is a registered trademark of Novell, Inc. in the United States and 
other countries. 


Media Support Module and MSM are trademarks of Novell, Inc. 
Mirrored Server Link and MSL are trademarks of Novell, Inc. 

Mobile IPX is a trademark of Novell, Inc. 

Multiple Link Interface and MLI are trademarks of Novell, Inc. 
Multiple Link Interface Driver and MLID are trademarks of Novell, Inc. 


My World is a registered trademark of Novell, Inc. in the United States and 
other countries. 


N-Design is a registered trademark of Novell, Inc. in the United States and 
other countries. 


Natural Language Interface for Help is a trademark of Novell, Inc. 
NDS Manager is a trademark of Novell, Inc. 
NE/2 is a trademark of Novell, Inc. 

NE/2-32 is a trademark of Novell, Inc. 

NE/2T is a trademark of Novell, Inc. 

NE1000 is a trademark of Novell, Inc. 
NE1500T is a trademark of Novell, Inc. 
NE2000 is a trademark of Novell, Inc. 
NE2000T is a trademark of Novell, Inc. 
NE2100 is a trademark of Novell, Inc. 
NE3200 is a trademark of Novell, Inc. 
NE32HUB is a trademark of Novell, Inc. 
NEST Autoroute is a trademark of Novell, Inc. 
NetExplorer is a trademark of Novell, Inc. 








NetNotes is a registered trademark of Novell, Inc. in the United States and 
other countries. 
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NetSync is a trademark of Novell, Inc. 


NetWare is a registered trademark of Novell, Inc. in the United States and 
other countries. 


NetWare 3270 CUT Workstation is a trademark of Novell, Inc. 
NetWare 3270 LAN Workstation is a trademark of Novell, Inc. 
NetWare 386 is a trademark of Novell, Inc. 

NetWare Access Server is a trademark of Novell, Inc. 
NetWare Access Services is a trademark of Novell, Inc. 
NetWare Application Manager is a trademark of Novell, Inc. 
NetWare Application Notes is a trademark of Novell, Inc. 


NetWare Asynchronous Communication Services and NACS are trademarks 
of Novell, Inc. 


NetWare Asynchronous Services Interface and NASI are trademarks of 
Novell, Inc. 


NetWare Aware is a trademark of Novell, Inc. 

NetWare Basic MHS is a trademark of Novell, Inc. 

NetWare BranchLink Router is a trademark of Novell, Inc. 

NetWare Care is a trademark of Novell, Inc. 

NetWare Communication Services Manager is a trademark of Novell, Inc. 


NetWare Connect is a registered trademark of Novell, Inc. in the United 
States. 


NetWare Core Protocol and NCP are trademarks of Novell, Inc. 
NetWare Distributed Management Services is a trademark of Novell, Inc. 





NetWare Document Management Services is a trademark of Novell, Inc. 
NetWare DOS Requester and NDR are trademarks of Novell, Inc. 
NetWare Enterprise Router is a trademark of Novell, Inc. 


NetWare Express is a registered service mark of Novell, Inc. in the United 
States and other countries. 


NetWare Global Messaging and NGM are trademarks of Novell, Inc. 
NetWare Global MHS is a trademark of Novell, Inc. 


NetWare HostPrint is a registered trademark of Novell, Inc. in the United 
States. 


NetWare IPX Router is a trademark of Novell, Inc. 

NetWare LANalyzer Agent is a trademark of Novell, Inc. 

NetWare Link Services Protocol and NLSP are trademarks of Novell, Inc. 
NetWare Link/ATM is a trademark of Novell, Inc. 

NetWare Link/Frame Relay is a trademark of Novell, Inc. 
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NetWare Link/PPP is a trademark of Novell, Inc. 

NetWare Link/X.25 is a trademark of Novell, Inc. 

NetWare Loadable Module and NLM are trademarks of Novell, Inc. 
NetWare LU6.2 is trademark of Novell, Inc. 

NetWare Management Agent is a trademark of Novell, Inc. 

NetWare Management System and NMS are trademarks of Novell, Inc. 


NetWare Message Handling Service and NetWare MHS are trademarks of 
Novell, Inc. 


NetWare MHS Mailslots is a registered trademark of Novell, Inc. in the United 
States and other countries. 


NetWare Mirrored Server Link and NMSL are trademarks of Novell, Inc. 
NetWare Mobile is a trademark of Novell, Inc. 
NetWare Mobile IPX is a trademark of Novell, Inc. 


NetWare MultiProtocol Router and NetWare MPR are trademarks of Novell, 
Inc. 


NetWare MultiProtocol Router Plus is a trademark of Novell, Inc. 
NetWare Name Service is trademark of Novell, Inc. 





NetWare Navigator is a trademark of Novell, Inc. 
NetWare Peripheral Architecture is a trademark of Novell, Inc. 
NetWare Print Server is a trademark of Novell, Inc. 
NetWare Ready is a trademark of Novell, Inc. 
NetWare Requester is a trademark of Novell, Inc. 
NetWare Runtime is a trademark of Novell, Inc. 
NetWare RX-Net is a trademark of Novell, Inc. 
NetWare SFT is a trademark of Novell, Inc. 

NetWare SFT III is a trademark of Novell, Inc. 
NetWare SNA Gateway is a trademark of Novell, Inc. 
NetWare SNA Links is a trademark of Novell, Inc. 
NetWare SQL is a trademark of Novell, Inc. 


NetWare Storage Management Services and NetWare SMS are trademarks of 
Novell, Inc. 


NetWare Telephony Services is a trademark of Novell, Inc. 
NetWare Tools is a trademark of Novell, Inc. 

NetWare UAM is a trademark of Novell, Inc. 

NetWare WAN Links is a trademark of Novell, Inc. 
NetWare/TP is a trademark of Novell, Inc. 
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NetWire is a registered service mark of Novell, Inc. in the United States and 
other countries. 


Network Navigator is a registered trademark of Novell, Inc. in the United 
States. 


Network Navigator - AutoPilot is a registered trademark of Novell, Inc. in the 
United States and other countries. 


Network Navigator - Dispatcher is a registered trademark of Novell, Inc. in the 
United States and other countries. 


Network Support Encyclopedia and NSE are trademarks of Novell, Inc. 


Network Support Encyclopedia Professional Volume and NSEPro are 
trademarks of Novell, Inc. 


NetWorld is a registered service mark of Novell, Inc. in the United States and 
other countries. 


Novell is a service mark and a registered trademark of Novell, Inc. in the 
United States and other countries. 


Novell Alliance Partners Program is a collective mark of Novell, Inc. 
Novell Application Launcher is a trademark of Novell, Inc. 
Novell Authorized CNE is a trademark and service mark of Novell, Inc. 


Novell Authorized Education Center and NAEC are service marks of Novell, 
Inc. 


Novell Authorized Partner is a service mark of Novell, Inc. 
Novell Authorized Reseller is a service mark of Novell, Inc. 


Novell Authorized Service Center and NASC are service marks of Novell, 
Inc. 


Novell BorderManager is a trademark of Novell, Inc. 
Novell BorderManager FastCache is a trademark of Novell, Inc. 
Novell Client is a trademark of Novell, Inc. 





Novell Corporate Symbol is a trademark of Novell, Inc. 


Novell Customer Connections is a registered trademark of Novell, Inc. in the 
United States. 


Novell Directory Services and NDS are registered trademarks of Novell, Inc. 
in the United States and other countries. 


Novell Distributed Print Services is a trademark and NDPS is a registered 
trademark of Novell, Inc. in the United States and other countries. 


Novell ElectroText is a trademark of Novell, Inc. 


Novell Embedded Systems Technology is a registered trademark and NEST is 
a trademark of Novell, Inc. in the United States and other countries. 





Novell Gold Authorized Reseller is a service mark of Novell, Inc. 
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Novell Gold Partner is a service mark of Novell, Inc. 
Novell Labs is a trademark of Novell, Inc. 


Novell N-Design is a registered trademark of Novell, Inc. in the United States 
and other countries. 


Novell NE/2 is a trademark of Novell, Inc. 

Novell NE/2-32 is a trademark of Novell, Inc. 

Novell NE3200 is a trademark of Novell, Inc. 

Novell Network Registry is a service mark of Novell, Inc. 





Novell Platinum Partner is a service mark of Novell, Inc. 
Novell Press is a trademark of Novell, Inc. 


Novell Press Logo (teeth logo) is a registered trademark of Novell, Inc. in the 
United States and other countries. 


Novell Replication Services is a trademark of Novell, Inc. 
Novell Research Reports is a trademark of Novell, Inc. 
Novell RX-Net/2 is a trademark of Novell, Inc. 

Novell Service Partner is a trademark of Novell, Inc. 
Novell Storage Services is a trademark of Novell, Inc. 


Novell Support Connection is a registered trademark of Novell, Inc. in the 
United States and other countries. 


Novell Technical Services and NTS are service marks of Novell, Inc. 

Novell Technology Institute and NTI are registered service marks of Novell, 

Inc. in the United States and other countries. 

Novell Virtual Terminal and NVT are trademarks of Novell, Inc. 

Novell Web Server is a trademark of Novell, Inc. 

Novell World Wide is a trademark of Novell, Inc. 

NSE Online is a service mark of Novell, Inc. 

NTR2000 is a trademark of Novell, Inc. 

Nutcracker is a registered trademark of Novell, Inc. in the United States and 
other countries. 

OnLAN/LAP is a registered trademark of Novell, Inc. in the United States and 

other countries. 


OnLAN/PC is a registered trademark of Novell, Inc. in the United States and 
other countries. 





Open Data-Link Interface and ODI are trademarks of Novell, Inc. 


Open Look is a registered trademark of Novell, Inc. in the United States and 
other countries. 


Open Networking Platform is a registered trademark of Novell, Inc. in the 
United States and other countries. 
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Open Socket is a registered trademark of Novell, Inc. in the United States. 
Packet Burst is a trademark of Novell, Inc. 


PartnerNet is a registered service mark of Novell, Inc. in the United States and 
other countries. 


PC Navigator is a trademark of Novell, Inc. 


PCOX is a registered trademark of Novell, Inc. in the United States and other 
countries. 


Perform3 is a trademark of Novell, Inc. 
Personal NetWare is a trademark of Novell, Inc. 


Pervasive Computing from Novell is a registered trademark of Novell, Inc. in 
the United States and other countries. 


Portable NetWare is a trademark of Novell, Inc. 


Presentation Master is a registered trademark of Novell, Inc. in the United 
States and other countries. 


Print Managing Agent is a trademark of Novell, Inc. 
Printer Agent is a trademark of Novell, Inc. 
QuickFinder is a trademark of Novell, Inc. 

Red Box is a trademark of Novell, Inc. 


Reference Software is a registered trademark of Novell, Inc. in the United 
States and other countries. 


Remote Console is a trademark of Novell, Inc. 
Remote MHS is a trademark of Novell, Inc. 
RX-Net is a trademark of Novell, Inc. 
RX-Net/2 is a trademark of Novell, Inc. 


ScanXpress is a registered trademark of Novell, Inc. in the United States and 
other countries. 


Script Director is a registered trademark of Novell, Inc. in the United States 
and other countries. 


Sequenced Packet Exchange and SPX are trademarks of Novell, Inc. 
Service Response System is a trademark of Novell, Inc. 

Serving FTP is a trademark of Novell, Inc. 

SFT is a trademark of Novell, Inc. 

SFT III is a trademark of Novell, Inc. 


SoftSolutions is a registered trademark of SoftSolutions Technology 
Corporation, a wholly owned subsidiary of Novell, Inc. 


Software Transformation, Inc. is a registered trademark of Software 
Transformation, Inc., a wholly owned subsidiary of Novell, Inc. 


SPX/TPX is a trademark of Novell, Inc. 
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StarLink is a registered trademark of Novell, Inc. in the United States and 
other countries. 

Storage Management Services and SMS are trademarks of Novell, Inc. 

Technical Support Alliance and TSA are collective marks of Novell, Inc. 


The Fastest Way to Find the Right Word is a registered trademark of Novell, 
Inc. in the United States and other countries. 


The Novell Network Symbol is a trademark of Novell, Inc. 

Topology Specific Module and TSM are trademarks of Novell, Inc. 

Transaction Tracking System and TTS are trademarks of Novell, Inc. 

Universal Component System is a registered trademark of Novell, Inc. in the 
United States and other countries. 

Virtual Loadable Module and VLM are trademarks of Novell, Inc. 


Writer’s Workbench is a registered trademark of Novell, Inc. in the United 
States and other countries. 

Yes, It Runs with NetWare (logo) is a trademark of Novell, Inc. 

Yes, NetWare Tested and Approved (logo) is a trademark of Novell, Inc. 

ZENworks is a trademark of Novell, Inc. 
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